chrislehrPatriot my reaction when transitioning to ATP (as it was then) - "there's only ONE quarantine?!?" I used to operate about 6 in my previous solution.
It doesn't address your implied security concern, but I mitigate to a slight degree by stamping the subject lines of mails sent to the hosted quarantine with a tag giving a clue as to why they are there.
furqannzr you can have one CAF per anti-malware policy. If you want to allow your techs or devs to handle attachment types that you do not want your end users to touch, create an anti-malware policy just for the technocrati and put it ahead of your main policy. Make sure each tech and dev knows what will happen to that privilege if they are caught sending ISOs (for example) to ordinary users! Your malware may vary.